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About PDP’s training courses 


PDP is Ireland’s leading provider of professional 
compliance training in the fields of data protection, 
data security and records management 


PDP’s training courses enable delegates to understand the legal 
requirements that apply to key areas of their daily working lives. 


Organisations that send their staff on PDP’s professional training 
courses benefit from the peace of mind in knowing that their staff 
will be fully up-to-date with the latest knowledge and developments. 


Expert trainers 
all of PDP’s trainers meet excellence criteria 


Quality venues 
all public courses take place in 4 or 5 star hotel venues in 
central Dublin or Cork, with a sit-down lunch included 


Comprehensive course materials 
all delegates receive a binder of materials explaining the subject 


Interaction 
delegates are encouraged to ask questions in the training 
sessions 


Discounts 
organisations sending multiple delegates will receive discounts 
for the second and subsequent delegates 


Fully up-to-date 
the content of each course is reviewed several times per year to 
ensure that PDP courses are the most up-to-date available 


In-house training 
all courses can be provided to you at your own premises - see 
page 19 


Certificate of attendance 
delegates are issued with a certificate of attendance on request 
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+353 (0)1 657 1479 


Five easy ways to 


book PDP Training 
courses: 





Telephone: 
+353 (0)1 657 1479 


Fax: 
+353 (0)1 633 5853 


Email: 
bookings @ pdp.ie 


Post: 

PDP 

Ground Floor 

14 Herbert Street 
Dublin 2 


Web: 
www.pdp.ie 


All bookings are subject to the 
terms which can be accessed at 


www.pdp.ie/training/terms 
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Data Protection Essential Knowledge 
Level 1 — 
Dublin and Cork "asa 


Data protection compliance is an essential legal requirement for all organisations. Investigations by the Data Protection 
Commissioner continue to gather pace for all sectors. It is best to put data protection procedures in place before 
problems occur to avoid legal liability, negative publicity and cost of regulatory enforcement. 


This course is an introductory level session for all those that are new to data protection, or those that require a refresher 
on the fundamental concepts. It is designed for people who work with, or will work with, data protection issues on a 
regular basis. 


This session provides a thorough grounding in the fundamental requirements of data protection, which derive from the 
Data Protection Acts 1988 and 2003, including: 


“Very good explanation. Very good 
notes.” 

Joanne Connolly 

Information Security Manager, 

Bord Gais Eireann 


how data protection law applies to your organisation 

what can and cannot be done with staff information and customer 
information 

the requirements on organisations to keep data secure, and how to 
meet those requirements 

the rights of individuals, such as customers and staff, in respect of data 
held by your organisation 

the legal requirements for gathering information for marketing, including 
the use of opt-out and opt-in clauses 

the requirements for using CCTV cameras 


” 


“Excellent tutor. Very informative course. 
Neil Deacon 

Compliance Officer, 

Raymond James Investment Services 


“The course was well pitched at the level 


an introduction to handling requests for information by individuals 
the special rules that apply to using ‘sensitive personal data’ ( e.g. 
medical information, criminal convictions, ethnicity data ) 

the restrictions on sending personal data abroad 

the legal requirements for outsourcing personal data processing 
operations, e.g. payroll, call-centres, private investigators and 
confidential waste management companies 

identifying which areas of your organisation need attention and 
remedial action 

the role of the Data Protection Commissioner 


The Trainer: €575* 
Peter Carey, Charles Russell 
See the Trainer's biography on page 20 


Who should attend: 

Compliance Officers, Human Resources 
Managers, Office Managers, Company 
Secretaries, IT Managers, Business Analysts, 
Records Managers, Archivists, Information 
Managers, Legal Advisors, Trainee Data Protection 
Officers, Database Managers, and others. 


of the participants. Excellent session 
leader. Very worthwhile.” 

Valerie Ryder 

Administrative Assistant, 

University of Limerick 


“The tutor’s examples on each element 
of the course were very good.” 

Brid Hand 

Competition & Benefits Manager, 

Wyeth Biotech 


15% discount for second delegate 
20% discount for third and subsequent delegates 


Short Day — 10.00am to 4.00pm (lunch included) 


Cork: Monday, 25th February 2013 
Dublin: Tuesday, 26th February 2013 
Dublin: Wednesday, 1st May 2013 

Cork: Wednesday, 25th September 2013 
Dublin: Thursday, 26th September 2013 


*The fee for both Data Protection Essential Knowledge - Level 1 and Data Protection Essential Knowledge - Level 2 booked together is €995 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Data Protection Essential Knowledge ie. 
Level 2 5, OP'S 
Dublin and Cork Ocak . 


This practical training session is designed for those that work in the field of data protection. The Level 1 and Level 2 
courses taken together constitute a complete training package on the fundamentals of data protection. 


This session provides a thorough grounding in the following important aspects of data protection practice: 


data retention - the restrictions on keeping data, and how to establish a retention schedule 

transferring data to third parties - the legal requirements for transferring data between organisations 

the main exemptions 

criminal offences - an introduction to the main offences, including potential penalties 

the powers of the Data Protection Commissioner 

the E-Privacy Regulations - an introduction to the restrictions on calling, emailing and faxing people for marketing 
purposes, and the use of cookies on websites 

risk assessments - the basics of when and how to carry out a risk assessment 

data destruction - methods to ensure lawful and secure destruction 


There will be plenty of opportunity for questions, and delegates are encouraged to bring their queries to the session. 


This Level 2 training course is designed as a natural progression from the Level 1 session, although attending Level 1 is 
not a pre-requisite to attending Level 2 unless you are a beginner to data protection. 


“Very good, in fact excellent.” “A lot of interesting facts given. “Very relevant, well pitched. Excellent 
Jean McManus Tutor had good knowledge and could course — very worthwhile.” 
Training Unit, give good examples in answers to Rebecca McGee 
Department of Foreign Affairs questions.” HR & Administration Supervisor, LIA 
Sandra Forbes 
“Would recommend to a friend.” Project & HR Manager, “Highly recommended” 
Colm O’Leary Ballymun Job Centre Katerzyna Pilch 
Registration Officer, Compliance Coordinator, 
The Teaching Council Citco Fund Services (Ireland) 
The Trainer: £575" 
Stephanie Pritchett 15% discount for second delegate 
See the Trainer's biography on page 20 20% discount for third and subsequent delegates 
Who should attend: Short Day — 10.00am to 4.00pm (lunch included) 
Compliance Officers, Human Resources 
Managers, Office Managers, Company Cork: Tuesday, 26th February 2013 
Secretaries, IT Managers, Business Analysts, Dublin: Wednesday, 27th February 2013 
Records Managers, Archivists, Information Dublin: Thursday, 2nd May 2013 
Managers, Legal Advisors, Trainee Data Protection Cork: Thursday, 26th September 2013 
Officers, Database Managers, and others. Dublin: Friday, 27th September 2013 


*The fee for both Data Protection Essential Knowledge - Level 1 and Data Protection Essential Knowledge - Level 2 booked together is €995 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Handling Access Requests 
Dublin and Cork 


Dealing effectively with requests for access to personal data under the Data Protection Acts remains a significant 
management challenge for many organisations. Requests can come from customers, employees, complainants and 
others. In Ireland, individuals’ awareness of their information rights, as well as their expectations of access, has reached 
an unprecedented level. Responding to Access Requests is a drain on staff time and budgets. 


Additionally, there has been an increase in the number of complaints to the Data Protection Commissioner about the 
failure of organisations to deal with Access Requests appropriately. 


This practical training course looks at the process of handling and responding to Access Requests, including: 


understanding the rights of individuals to gain access to information held by organisations 

the formalities for making a request, including determining whether a valid request has been made 

how to liaise with the requester to clarify the request if necessary 

the fees and time limits 

analysing whether paper records fall within the law 

tips for the conduct of searches for personal data - setting parameters and collating the results 
establishing whether the retrieved information is ‘personal data’ within the meaning of the Data Protection Acts 
dealing with third party data 

applying exemptions which may allow the organisation to withhold certain information 

handling requests from other persons - e.g. solicitors, financial advisors, public representatives or parents 
presenting the response to the applicant, including how to redact documents 

managing dissatisfied requesters 

guidance from the Data Protection Commissioner and the Article 29 Working Party 

how to deal with complaints from requesters and investigations by the Commissioner’s Office 

staff awareness and training 


Participants in this training course will acquire the knowledge necessary to effectively manage Access Requests in their 
organisation and to instigate a process for dealing with such requests. 


Participants will work through the Commissioner's guidance and a number of practical scenarios with expert guidance 
from one of the leading experts on managing Access Requests. 


There will be plenty of opportunity for questions at the Training course. geri a 
o a 
Oy, 
The Trainer: €575* ; 
Paul Lavery, McCann FitzGerald 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Who should attend: Short Day — 10.00am to 4.00pm (lunch included) 


Data Protection Officers, Information Officers, 
Privacy Officers, Compliance Officers, Information 
and Commercial lawyers (in-house and private 
practice), Office Managers, Human Resources 
Officers, Records Managers, and others. 


Cork: Wednesday, 27th February 2013 
Dublin: Thursday, 28th February 2013 
Dublin: Monday, 13th May 2013 
Dublin: Tuesday, 1st October 2013 
Cork: Friday, 1st November 2013 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Data Security F : 

j : URS: 
Dublin and Cork 2 Cay ; 
Data protection law requires that personal information must be held and used securely. 


Recent headlines have shown that organisations are not doing enough to ensure the security of people’s personal data. 
It is not always obvious what measures should be taken by organisations to comply with the legal obligations. 


This session examines the law as it relates to data security, and the practical steps that organisations need to take to 
ensure compliance with their obligations. It concentrates on how to avoid data security breaches, and also looks at what 
can be done to mitigate the effects of any breach that does occur. The session considers the practical implications of the 
recommendations of various government and other reports on the security of data. 


Key aspects of this session include: 


analysis of the legal requirements for keeping personal information secure 

the Data Protection Commissioner’s recommendations and latest guidance 

the data security implications of using 3rd parties to process personal information, such as external contractors and 
outsourced service providers 

examination of the powers of the Data Protection Commissioner and other legal and commercial consequences of 
data security breaches 

managing a data security breach - law and best practice 

laptop and portable media encryption - when it is required 

informing individuals and notifying the Commissioner about data security breaches - what is required and how to go 
about it 

confinement strategies to prevent further dissemination of lost or stolen data 


Delegates will learn about the practical steps that can be taken in their organisation to avoid the adverse consequences 
that can arise from data security incidents. 


“Excellent” “Very informative and useful” “Good course at a good pace” 
Corinne Clark Amanda Davys Harry Neilson 
Client Services Director, Regional Head of Information Security, Information Security Manager, 
Real Fundraising DHL ICM Computer Group 
“Case studies and group exercise “The materials are very useful” “Very complete coverage and 
really useful” Lana Roy comprehensive information” 
Sue Bullock Customer Service Manager, Tony Scott 
Information and Security Analyst, TCBC BICV IT Auditor, Grafton Group Plc 

The Trainer: €5757 

David Fagan 15% discount for second delegate 

See the Trainer's biography on page 20 20% discount for third and subsequent delegates 

Who should attend: Short Day — 10.00am to 4.00pm (lunch included) 

Data Protection Officers, Heads of IT, Risk 

Managers, Information Officers, Privacy Officers, Dublin: Monday, 4th March 2013 

Compliance Officers, Information and Commercial Cork: Friday, 8th March 2013 

lawyers (in-house and private practice), Office Dublin: Tuesday, 21st May 2013 

Managers, Human Resources Officers, Records Dublin: Friday, 4th October 2013 

Managers, and others. Cork: Monday, 18th November 2013 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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International Data Transfers - Overcoming the Limitations 
Dublin 


EU data protection law restricts the transfer of personal information to countries outside the EEA that do not have an 
adequate level of data protection. This restriction is entirely at odds with the way in which organisations operate in today’s 
world, and presents a difficult legal challenge to global data processing and international outsourcing. 


This session provides a practical hands-on approach to the different mechanisms available to overcome the legal 
limitations affecting international data transfers. 


Attend this session to identify the most appropriate solution to the challenges faced by your organisation and learn about 
the most cost-effective way to comply with the law. 


This session addresses all of the practical questions affecting international transfers of personal data such as: 


can | rely on consent to transfer employee data? 

how do | justify the use of model contracts to my service providers? 

what level of security is an offshore call centre required to adopt? 

which EU jurisdictions require regulators’ approval prior to the transfer? 

can | use an intra-group agreement to enable global processing within my organisation? 
what materials do | need to submit when applying for Binding Corporate Rules approval? 
what is the right approach to adopt in my particular case? 


Delegates will acquire the knowledge necessary to determine the most effective method for ensuring the legality of 
international transfers in any given circumstance. 


“Excellent” “Excellent” “Excellent” 
Michaela Simmonds Ajit Basi Catherine Morrongiello 
Data Protection Manager, IT Director, Corporate Counsel, 
AmicusHorizon Interdean Limited Level 3 Communications 
“Very informative course. Interesting “Very useful and enlightening” 
and helpful.” David Parker 
Emma Drew Privacy Manager, wee : 
Data Protection Analyst, Crawford & Company Shy ? 
Canada Life 2 OURS 
+ CPp : 

The Trainer: €575* 

Sian Rudgard 15% discount for second delegate 

See the Trainer's biography on page 20 20% discount for third and subsequent delegates 

Who should attend: 

In-house lawyers, Data Protection Officers, Short Day — 10.00am to 4.00pm (lunch included) 

Compliance Officers, International Development 

Directors and Managers, IT Directors and Dublin: Monday, 15th April 2013 

Managers, HR Directors and Managers, Dublin: Monday, 14th October 2013 


Outsourcing Service Providers, and others. 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Data Protection in the Workplace 
Dublin and Cork 


For Human Resources departments, meeting the requirements of data protection law can be particularly challenging. 
Holding and handling staff information carries significant legal responsibilities and risks. 


This invaluable one-day training course is designed to meet the needs of Human Resources Managers and Officers. It 
will also be useful to Employment Lawyers and companies providing outsourced HR functions to other organisations. 


The session lets delegates know the key areas of risk and includes practical advice on: 


obtaining, using and managing staff information 

ensuring that the recruitment and selection process meets the legal requirements, including the content of application 
forms, pre-employment vetting, criminal records, medical checks and the interview process 

retaining staff records, including setting appropriate periods of time for keeping information 

dealing with information requests from staff - what must be disclosed and what you can withhold 

disclosing staff information to outside third parties - the legal requirements that must be met before staff information 
can be sent outside the organisation 

references and the rights of ex-members of staff 

monitoring staff activities and communications, including using line managers, private detectives, CCTV cameras and 
website monitoring technologies 

handling sensitive information such as health and sickness records and medical data 

how to handle mergers, acquisitions and restructuring 

outsourcing functions to third party providers 

how to handle staff complaints 

the role of the Data Protection Commissioner and what to do if he instigates an investigation 


There will be plenty of opportunity for questions at the training course. 


“Some interesting issues in relation “The course was very well presented “The case studies and examples were 
to dealing with access requests which and very informative.” particularly useful.” 

! wouldn’t have been conscious of Paul Dawson Triona Delicato 

previously.” Data Protection Officer, HR Specialist, 

Margaret Mulhair Dublin City Council Commission for Communications 
Assistant Principal, Regulation 


ee 
SONS e ie 


The Property Registration Authority 


The Trainer: €575* 
Colin Rooney, Partner, Arthur Cox 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Short Day — 10.00am to 4.00pm (lunch included) 
Who should attend: 


Human Resources Officers and Administrators, Cork: Friday, 1st March 2013 
Personnel Officers, Data Protection Officers, Dublin: Monday, 25th March 2013 
Compliance Officers, Employers’ Representatives, Dublin: Monday, 20th May 2013 

and Employment Law Advisers. Dublin: Wednesday, 2nd October 2013 


Cork: Monday, 4th November 2013 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Training Staff in Data Protection 
Dublin 


According to the Data Protection Commissioner, all staff who handle personal information in the workplace (which 

will usually include all staff who use computers) must receive basic data protection training. Having responsibility for 
training staff on data protection issues can be a daunting prospect. Yet it is essential that all relevant staff understand the 
fundamental principles and the practical requirements for complying with data protection rules. It is also important that 
staff are able to identify breaches or potential breaches of data protection law, and to react appropriately. 


Practical and non-technical, this training session provides the key resources needed to set up an internal training 
programme. It also considers the key issues in planning for and preparing a staff training session, including: 


who should be trained, and what they need to know 

appropriate training tools for different groups of staff 

putting together slides, exercises, case studies, and taking examples from “real life” 
session length and timings 

getting the audience on-side and keeping them engaged 

assessment and follow-up 


There will be plenty of opportunity for questions, and delegates are encouraged to bring their queries to the session. 


“Very good.” “Excellent” 

Paul Dawson Orla Carty 

Data Protection Officer, Information Security, 
Dublin City Council Beaumont Hospital 


“The practical exercises and the course “Good structure for planning a training 


notes were very valuable.” course - good examples of tools to went eee, . 
Mary O’Reilly use.” 5 *e 
HR Development Manager, Meadhbh McCann : 4OuUp - 
Central Fisheries Board Practice Development Co-ordinator, 7 Cep S$: 
Dublin Simon Community “ r 
“The training was very good. “teen eet 7 
|! recommend.” “Very useful course” 
Patricia Quinn Michael Reid 
Information Officer, FOI Officer, 
DARD 


NI Court Service 


The Trainer: €515* 
Stephanie Pritchett 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Who should attend: 

Compliance Officers, Human Resource Managers, 
Office Managers, Finance Managers, Customer 
Services Managers, Marketing Managers, IT 
Managers, Information Managers, In-house 
lawyers and others. 


Short Day — 10.00am to 4.00pm (lunch included) 


Dublin Friday, 3rd May 2013 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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How to Conduct a Data Protection Audit 
Dublin 


Data protection compliance audits, or reviews, are invaluable for organisations in assessing their current state of data 
protection compliance. They can identify where the organisation is getting things right, as well as reveal where there are 
weaknesses which require action or changes to internal procedures. 


The Data Protection Commissioner's Office has recommended that regular compliance reviews are undertaken as part 
of ongoing internal management of data protection. 


Compliance reviews can be conducted either internally or by external consultants. Either way, the person conducting the 
review should go about the task in the most efficient and effective way. 


This course offers practical guidance on conducting data protection audits/reviews, and covers: 


the purpose of data protection audits/reviews 

deciding what to review: how to identify the areas that are relevant 

undertaking the audit: guidance on the practical methodology as well as how, what and who to ask in relevant staff 
interviews 

determining whether audited processes meet both data protection requirements and internal policies/procedures 
what to look for when auditing arrangements with third party suppliers 

how to report the results of an audit and how to recommend any remedial action that is needed 

the Commissioner’s recommendations for conducting audits 


Sample checklists and audit templates will be provided to delegates. 


It is recommended that delegates attending this course have some existing knowledge of data protection. Those with no 
existing knowledge should attend Data Protection Essential Knowledge - Level 1 before attending this course. 


oe 
Ca 9 


oH, ‘. 
Oy, 
Cpp 8 ‘ 
The Trainer: €575* 
Olivia Whitcroft 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 
Who should attend: 
Data Protection Officers, Information Officers, Short Day — 10.00am to 4.00pm (lunch included) 
Compliance Officers, In-house Lawyers, Company 
Secretaries, Risk Management Officers, Internal Dublin: Thursday, 25th April 2013 
Audit staff, Information Security Officers and Dublin: Wednesday, 27th November 2013 


others (private or public sector) 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Records Management 1 
Dublin and Cork 


Organisations face increasing pressure to manage their records according to statutory and business requirements. As 
the use of electronic records and the deployment of electronic document and records management systems continue 
to increase, the core skills of the person responsible for records management become ever more important to the 
organisation. 


This invaluable training course, led by an internationally acclaimed records management expert, Philip Jones, examines 
core concepts of good records management practice. 


This introductory level session provides a thorough grounding in the fundamentals of records management, including: 


introduction - basic concepts 

records management tools 

records lifecycle approach 

designing a file plan 

records destruction 

legal framework/compliance 

management of electronic records and email 


Delegates are encouraged to share their own experiences at the training course. 


The day will be a mixture of presentation and practical exercises. There will be plenty of opportunity for questions. 


“Gives a good introduction to the “The course was very helpful 

approach and structured way of in understanding how records 

starting.” management works within an 

Laura Keane organisation.” wereeee, 

Assistant Director, Anne Bennett 5 he 

RehabCare Executive Secretary, : HOuUp : 
European Space Agency . CPp $s : 

“Excellent.” *. 

Dualta O Broin “The classification types were | = ——  “***"" 

Corporate Governance, particularly useful.” 

Department of Community, Richard Neale 

Rural & Gaeltacht Affairs Environmental Health & Safety Manager, 


Edenderry Power Ltd 


The Trainer: €495* 
Philip Jones 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Who should attend: 

Records Managers, Archivists, Office Managers, 
Information Managers, Data Protection Officers, 
Records Management Officers, Compliance 
Officers, Freedom of Information Officers and 
anyone involved in the management of records. 


Short Day — 10.00am to 4.00pm (lunch included) 
Dublin: Monday, 17th June 2013 


Cork: Monday, 16th September 2013 
Dublin: Monday, 25th November 2013 


*If this Training course is booked with Records Management 2, the fee for both Training courses is €895 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Records Management 2 
Dublin and Cork 


This course examines how to implement good records management practice. Led by internationally recognised expert in 
records management, Philip Jones, this intermediate level session provides a grounding in the fundamentals of records 


management. 


introduction — initiating a records management project 


records Audit 
process mapping 


building a business classification scheme 


measuring Performance 
EDRMS 


sustaining a records management programme 


Delegates are encouraged to share their own experiences at the Training course. The day will be a mixture of 


presentation and practical exercises. There will be plenty of opportunity for questions. 


Delegates electing to attend only the Records Management 2 course should have a knowledge of basic records 
management principles including classification, metadata and retention, which are covered in the Records Management 


1 course. 


“| found the two-day course very 
helpful. | have greatly benefitted from 
what I have learned from Philip.” 
Natasha Smith 

Medical Records Officer, 

National Rehabilitation Hospital 


“The classification methods and 
EDRMS were particularly useful.” 
Maciej Szydlowski 

Executive Project Officer, 

National Social Work Qualifications 
Board 


The Trainer: 


“Excellent.” 

Cara Leigh Hamill 

Records Management Officer, 
Southern Education & Library Board 


“Very analytical presentation 
explaining not only Records 
Management but other requirements 
that lead to an effective RM 
programme. Thank you again.” 
Soumela Segouli 

Administrative Assistant, 

Black Sea Trade & Development Bank 


€495* 


eee 
e° fe 


Philip Jones 
See the Trainer’s biography on page 20 


Who should attend: 


15% discount for second delegate 
20% discount for third and subsequent delegates 


Short Day — 10.00am to 4.00pm (lunch included) 


Records Managers, Archivists, Office Managers, 


Information Managers, Data Protection Officers, 
Records Management Officers, Compliance 
Officers, Freedom of Information Officers. 


Dublin: Tuesday, 18th June 2013 
Cork: Tuesday, 17th September 2013 
Dublin: Tuesday, 26th November 2013 


*If this Training course is booked with Records Management 1, the fee for both Training courses is €895 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Bribery Level 1: Essential Knowledge 
Dublin 


Bribery and corruption regularly make the headlines and are significant compliance issues for all organisations. 
Reputational damage, public procurement debarment, substantial fines and share price losses can, and often do, directly 
follow any issue related to bribery or corruption. 


In Ireland the Prevention of Corruption (Amendment) Act 2010 has been in force since December 2010. Further, many 
Irish businesses have UK businesses, directors or listings that would bring them within the remit of the UK Bribery Act, 
which brings with it the prospect of ten-year prison sentences and unlimited fines. 


This one-day training course is comprehensive and wide-ranging, and provides an excellent foundation in bribery and 
corruption, covering all critical areas including: 


what are bribery and corruption? 

how are bribery and corruption perpetrated? 

what bribery legislation, including the UK Bribery Act, means for me and for my organisation 
training, education and communication 

how international bribery laws compare, including the UK Bribery Act 

domestic and international risks of bribery 

what are the UK Bribery Act’s ‘Six Principles’ - and why are they important 

what are adequate anti-bribery procedures? : 
how to implement - and maintain - adequate procedures : 5 Ho 
proving that procedures are adequate ~ CPp 
the Corporate Shield ; 
what happens when adequate procedures fail? 

what needs to be included in a Code of Conduct? 

how to manage third-parties 

getting top-level support, including the cost of compliance 
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Delegates will have the opportunity to work through a number of case studies drawn from the Ministry of Justice 
guidance, industry-specific scenarios and practical cases, supported by internationally-published short bribery and 
compliance Whitepapers produced by the Course Trainer. The course is highly interactive, with plenty of opportunity for 
questions. 


The Level 1 and Level 2 courses taken together constitute a complete training package on the fundamentals of bribery 
law and compliance. 


A discount is available for delegates booking both Bribery Level 1 and Bribery Level 2 - see below. 


The Trainer: €575* 
Keith Read 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Who should attend: 

Compliance Officers, Compliance Managers, 
Lawyers, Risk Managers, Corporate Security 
Officers, and others. 


Short Day — 10.00am to 4.00pm (lunch included) 


Dublin: Tuesday, 9th July 2013 


*If this course is booked with Bribery Level 2, the fee for both sessions is: €995 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Bribery Level 2: Implementing the Culture Change 
Dublin 


“It couldn’t happen in my organisation” is a popular refrain; but what anti-bribery controls do you and your organisation 
have in place - and how effective will they be now that bribery legislation is gaining significant worldwide traction? Central 
to an effective anti-bribery programme is a strong anti-bribery culture. However, delivering that culture is often one of the 
most challenging areas, and the most difficult to measure. 


This one-day training course enables practitioners from a wide range of backgrounds and disciplines to consider the 
cultural requirements of an effective anti-bribery and corruption programme - and how that culture change can be 
successfully implemented, managed and measured. Areas covered include: 


“Very useful day that will now 
be put into practice. Thanks.” 
Dawn Kneafsey 


how does bribery occur? 
who perpetrates bribery, and why? 


bribery risks, and risk mitigation HR Director, Schueco 
anti-bribery strategy - taking the high ground 

what is an anti-bribery culture? “Very appropriate for my 
cultural aspects of bribery laws, and related legislation needs” 

rules and principles David Beattie 

tools and techniques - the Compliance Covenant and Compliance Passport Compliance Manager, 


incentives and disincentives, including the ‘level playing field’ The Chartered Institute for IT 


anti-bribery - monitoring and measuring, including Benford’s Law 


managing third-party culture “The experience 1 ne 


presenter helps to identify 


culture and processes, including certifications options which can be used” 
culture and the Code of Conduct Catherine Harris 
managing, implementing and assessing culture change Corporate Risk Officer, M&W 


culture and corporate reputation in practice 


Delegates will have the opportunity to work through an anti-bribery culture change case study, which will enable them to 
consider how those tools, techniques and approaches could be used in their own company or organisation; this will be 
supported by internationally-published short bribery and compliance Whitepapers produced by the Course Trainer. The 
course will be highly interactive, with plenty of opportunity for questions. 


The Level 1 and Level 2 courses taken together constitute a complete training package on the fundamentals of bribery 
law and compliance. A discount is available for delegates booking both Bribery Level 1 and Bribery Level 2 - see below. 
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The Trainer: £575" 
Keith Read 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 
Who should attend: : 
Compliance Officers, Compliance Managers, Short Day — 10.00am to 4.00pm (lunch included) 
Lawyers, Risk Managers, Corporate Security Dublin: Wednesday, 10th July 2013 


Officers, and others. 


*If this course is booked with Bribery Level 1, the fee for both sessions is: €995 
*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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PCI - The Essentials 
Dublin 


Every business that processes, stores or transmits credit or debit card holder data must meet the requirements 
established in the Payment Card Industry (PCI) Data Security Standard (DSS). Companies can struggle to find 
cost-effective ways to implement the required risk management framework. 


This training course presents a comprehensive review of the Standard along with its goals and objectives, and features 
real life examples of implementing controls. 


You will learn what policies and controls need to be implemented to be compliant and how to design compensating 
controls when you need to. The course details the compliance process and provides proven steps to achieve and 
maintain compliance. The course presenter is a Qualified Security Assessor certified by the PCI Standards Council with 
hands-on skills and experience in getting companies compliant quickly and cost-effectively. 


Key aspects of this course include: 


a complete review of the PCI DSS - 6 goals - 12 requirements 
explanation of the prioritised “Milestone” implementation approach 
overview of the Card Brand, Acquirer, Service Provider, Merchant, QSA and ASV roles 
what evidence you need to produce 

how to effectively use Compensating Controls 

the polices that must be in place for compliance 

ASV scanning and security penetration testing requirements 
wireless, cloud and virtualisation controls 

the supporting PA-DSS and PTS standards 

practical exercises 

ROI and key messages for the business 


“Good overview of the PCI world” “Very good for giving an wer eee 7 
Gary Atwal understanding of the whole ry 5 Rie ° 
Technical Project Manager, framework” : cp las 
Amnesty International Laura Hytti 7 (2) : 
Registration and Operations Manager, Sisco ge “ 


General Optical Council 


The Trainer: €645* 
Richard Hollis 15% discount for second delegate 
See the Trainer’s biography on page 20 20% discount for third and subsequent delegates 


Who should attend: 

Chief Finance Officers, Chief Information Officers, 
IT Managers, Compliance Officers, Risk Manager, 
PCI Stakeholders, and others. 


Short Day — 10.00am to 4.00pm (lunch included) 


Dublin: Thursday, 5th September 2013 


*Discounts apply to delegates booked at the same time, on the same course, and from the same organisation 
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Data Protection for Support Staff 


In-house only 


Whilst it is common for organisations to train their key and management staff to a high standard, support and 
administration staff are often overlooked. According to the Data Protection Commissioner, all staff who use personal data 
in the workplace must have data protection training. 


This session is designed to give your support staff a basic grounding in the fundamentals of data protection. Having 
your staff attend this session, which is supplied at your premises, will give you the peace of mind in knowing that your 
staff understand what they are permitted to do, and what they must not do, with the personal information of both your 
customers and other staff members. 


Sending your office workers on this course will result in your organisation stepping into a higher level of data protection 
compliance, an essential requirement in the modern office environment. 


Amongst other topics, your staff will learn: 


the importance of protecting personal data in the workplace 

what must, and must not, be done with personal information 

key requirements for data security in the workplace 

how to identify data protection issues that must be referred to senior staff 
how to spot a subject access request and what to do about it 

how to protect passwords 

when information should not be sent by post or given over the phone 


There will be plenty of opportunity for questions, and delegates are encouraged to bring their queries to the session. 


Who should attend: 

Office Workers, Administrative Staff, Human 

Resources Officers, Marketing Executives and 

Officers, IT Staff, Call Centre Staff, Complaints Email your In-House Training requirements to: inhouse @ pdp.ie 
Handlers, Records Managers, Archivists, 

Secretaries and any staff that use personal 

information in the workplace. 
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Practitioner Certificate in Data Protection 


The Practitioner Certificate in Data Protection is the practical qualification for those who work in the fields of 
data protection and privacy. 


Successful completion of the Practitioner Certificate in Data Protection Programme demonstrates to employers 
and others that the candidate possesses a solid knowledge of data protection law, as well as an understanding of 
the practical implications for organisations of the legal requirements. 


The Programme 


Individuals wishing to gain the qualification must complete the three elements of the Programme: 


5 days face-to-face teaching “, x 
study ofcourse materials 0 ee ® 
the Examination - held each June and December in Dublin 


The tuition section of the Programme requires candidates to attend four one-day Compulsory Courses and a one-day 
Elective Course. 


Compulsory Courses Elective Courses 
candidates must attend all 4 courses candidates must choose 1 course 





Data Protection Essential Knowledge - Level 1 —# Data Protection in the Workplace 

Data Protection Essential Knowledge - Level 2 # International Data Transfers - Overcoming the 
Handling Access Requests Limitations 

Data Security 





An exemption from the requirement to attend Data Protection Essential Knowledge - Level 1 is available to 
candidates who already possess a sufficient level of knowledge of the basics of data protection. Candidates wishing 
to apply for the exemption must submit a letter signed by their current or previous employer stating that they have 
worked in the field of data protection for at least two years. 

Exam dates 

The Examination is held in Dublin, Ireland. The next dates for the Examination are as follows: 


Friday, 21st June 2013 
Friday, 6th December 2013 


Candidates who have already attended any of the Compulsory or Elective courses are not required to attend them 
again - a discount of €300 per course already attended will be applied to the Programme fee. 


How to Apply 


To book your place on the Programme fax the completed booking form to +353 (0)1 633 5853, call +353 (0)1 657 1479 
or book online at: www.dataprotectionqualification.ie/booking-form 


The Office of the Data Protection Commissioner was consulted on the design of the Syllabus for the Practitioner 
Certificate in Data Protection Programme. 


For more information please visit 
www.dataprotectionqualification.ie 
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In-House Training Solutions 


Effective training will improve the productivity of your employees, making your 
business compliant and competitive 


PDP In-House Training provides tailored training solutions delivered at a location of your choice. Whether you need data 
protection training or records management skills training, we can develop a course to fit your needs. 


All PDP’s training courses listed in this catalogue can be provided for your staff at your own premises or at a location of 
your choice. Additionally, we can tailor or create a course to suit the exact needs of your organisation. 


f 


The advantages of in-house training 


Choosing an in-house version of one of our training courses 
will be more economical where several members of your staff 
will be attending the session. 






r 
~ You also benefit from having a PDP Trainer ‘to yourselves’ for 
the day, at your own premises — the Trainer can ‘confidentially’ 
answer questions relating to the specific compliance needs of 


your organisation. 


( 


. 


A further advantage of choosing an in-house training session is that your staff will not incur the travel costs associated 
with attending a ‘public’ session. 


Choosing an in-house training solution means that you are 
in control of the schedule — you choose the start time and 
duration of the session to suit your needs. 


Quality training 


The same Trainers who provide PDP’s public courses also provide the in-house sessions, so you are assured of the 
same high quality course leaders who are not only experts in their field but also highly accomplished Trainers. 


For more information please contact the In-House Team at: inhouse @pdp.ie 


“We went away with a much better “We found the course was run ata “The trainer made the topic very 

understanding of all the exemptions pace that suited the audience. The interesting, encouraged plenty of 

and DPA than we thought possible presenter was very knowledgeable interaction among the delegates, was 

from a one day training course, and for on DP matters and seemed happy to very knowledgeable on the topic and 

that we thank you again” deviate from the course content to had excellent presentation skills. 

Attorney General’s Office cover any business specific questions So thank you on the Group’s behalf 
we wanted to raise with him. It was as all attendees found the workshop 

“We all enjoyed the training sessions. _ good the timings for the day allowed interesting and beneficial” 

We found the trainer to be very for this” Gowan Group 

professional and motivating. She was Ageas Insurance 

very well prepared and we all found “PDP was very helpful to us in 

her to be such a nice person. She has “The training session was excellent. organising the presentation. Full 

given us a lot to think about and we ! received very good feedback from marks to PDP for the way they 

can now start to improve our data staff who found the subject more organised the course and dealt with 

protection policies. Thank you, this interesting than they had anticipated!” any queries that we had.” 

training was very worthwhile” Chartered Institute of Public Relations Ascertiva 

AICR 
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PDP Trainers 


Peter Carey 
Charles Russell 


Peter Carey is a Solicitor who is dually qualified 
in both Ireland and the United Kingdom. 


ix A 
cd _< He is a Consultant with London law firm Charles 


Russell, is Visiting Fellow at the London School of Economics and 
has written lreland’s leading data protection book: Data Protection - 
a practical guide to Irish and EU law (Round Hall). 


Peter also contributes articles to Data Protection Ireland Journal. 


David Fagan 
Eversheds 


ae 
ff David Fagan is a Partner at Eversheds and has 
particular expertise in commercial, as well as 
a; advisory and contentious general data protection 
issues. His clients include public sector and private 
sector bodies, IT companies, financial institutions, pension funds and 
insurance companies. 


David has been involved in representing clients that have come to 
the attention of the Data Protection Commissioner's office in their 
major investigations over the last few years. 


Richard Hollis 
Risk Factory Ltd 


Richard Hollis is the Chief Executive Officer 

of Risk Factory Ltd, a European information 
security risk management consulting firm. 

As a Certified Information Security Manager 
(CISM), Certified Protection Professional (CPP) and a Payment 
Card Industry (PCI) Qualified Security Assessor (QSA), Richard 
possesses extensive hands on skills and experience in designing, 
implementing, managing and auditing information security 
programmes. 





Philip Jones 


Philip Jones has over 30 years information 
management experience in public and private 
sector organisations both as a practitioner and 
at a senior management level. His wide range of 
practical experience has involved working in the 
areas of information legislation, information security and electronic 
document and records management. 





Paul Lavery 
McCann FitzGerald 


Paul Lavery is head of McCann FitzGerald’s 
Technology & Innovation Group and advises 
on a wide range of data protection, information 
technology, confidentiality and freedom of 
information issues. 
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Stephanie Pritchett 
Pritchetts 


— 
ed Stephanie Pritchett of specialist data protection 
and privacy law firm ‘Pritchetts’, is an industry 
q leading lawyer practising in data protection, 
freedom of information and privacy law as well 
as information management. 


Colin Rooney 
Arthur Cox 


Colin Rooney is a Partner in Arthur Cox’s 
Technology and Life Sciences Group. 

Colin’s practice has a strong emphasis on 

data protection, freedom of information and 
information management issues. Colin has particular expertise 

in advising on data protection matters in the HR sector, including 
on matters such as the processing of sensitive personal data, the 
handling of access requests (notably in the context of litigation) and 
the steps required for compliant data sharing (including as part of 
international data transfers). 





Sian Rudgard 
Field Fisher Waterhouse 


Sian Rudgard works in the Privacy and 
Information Law Group at Field Fisher 
Waterhouse. She has wide experience of dealing 
with international data protection issues and has 
an unrivalled level of knowledge of Binding Corporate Rules (BCR) 
as a basis for legitimising international data transfers, having led 
the assessment and authorisation of the first two BCR schemes 
ever approved by the national regulator. 





Olivia Whitcroft 
OBEP 


Olivia Whitcroft led the data protection practice 
at PricewaterhouseCoopers Legal LLP for 
several years before setting up her own 
specialist firm. Olivia specialises in all aspects 
of data protection compliance, including conducting compliance 
audits and reviews, drafting data protection policies, contracts and 
frameworks, and advising on compliance and good practice. 





Keith Read 
Compliance Expert 


a! Keith Read is an award-winning thought 
leader and expert in compliance, ethics and 
governance. He was formerly the Group 
Director of Compliance and Ethics for British 
Telecom and is a past winner of the Compliance Register’s Best 


: Compliance Officer award, when he also won the Best Compliance 


Company award. 
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Please fill in the form below and fax or post it to book your place/s: 


Discount: 15% discount for second delegate, 20% discount for third and subsequent delegates on the same course and date, 
and booked at the same time 


| DY=) (=e F-1X-t-am DL=1 tT 1 Ko Five easy ways to book 


Titles Names Telephone: +53 (0)1 657 1479 
Organisation: Fax: +353 (0)1 633 5853 
nan Email: bookings @ pdp.ie 
Positions PDP 
Email: 14 Herbert Street 
Telephone: Euniine 
Ireland 
Address: Website: www.pdp.ie 


Available courses 
Name of Course: 


Date of Course: Data Protection Essential Knowledge - 


. Level 1 

Title: Name: 

Data Protection Essential Knowledge - 
Position: 

Level 2 
Email: Handling Access Requests 
Name of Course: Data Security 
Date of Course: International Data Transfers 
Title: Name: Data Protection in the Workplace 
Position: Training Staff in Data Protection 

; Records Management 1 

Email: 


Records Management 2 


Name of Course: PCI - The Essentials 


DateofCourse How to Conduct a Data Protection Audit 
For additional delegates, please copy the form, call or book online Bribery Level 1 
TaN Woy Cox-Mo(=\t-1 iFM (lime llicclecva1) Molme oLUlces nr-l-x-Me)ce(-tamalvlin) f=) am (lmalcxeve(-te)) Bribery Level 2 


Data protection 


To see how we use your data, please visit 
www.pdp.ie/privacy_policy 
We never transfer delegates’ data to third 


Payment parties. 


L} | enclose a cheque for € Please make cheque payable to “PDP” LN ENIESUUT of F=1 (=~) 


(_} Please send me an invoice 


PDP sends compliance news updates to 
Terms its customers by email newsletter, as well 
as the occasional hard copy mailing on 
courses and events. 


_) Tick this box if you do not wish 
If you are unable to attend the course(s), but would like to purchase the course to receive this information 
materials for €145 per course, please tick below. 


Bookings are made subject to our terms, which can be found at www.pdp.ie/training/terms 


Unable to attend? 


C) Data Protection Essential Knowledge - Level 1 C) Data Protection in the Workplace C) How to Conduct a Data Protection Audit 
(_} Data Protection Essential Knowledge - Level 2 L) Training Staff in Data Protection L) Bribery Level 1 


(_} Handling Access Requests (_} Records Management 1 ) Bribery Level 2 
(_) Data Security (_) Records Management 2 
(_} International Data Transfers _} PCI -The Essentials 
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Please fill in the form below and fax or post it to book your place/s: 


Discount: 10% discount for second and subsequent delegates booking at the same time, where candidates are attending the 


same course dates. 


For additional candidates, please photocopy this form or apply online. 


Delegate’s Details: 
Title: Name: 
Organisation: 

Position: 

Email: 

Telephone: 


Address: 


TanYZo) (oX= We (=1t-11 Mm (Lme lice 1e=1a19) 
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Five easy ways to book 


Telephone: +353 (0)1 657 1479 
Fax: +353 (0)1 633 5853 
Email: bookings @ pdp.ie 
Post: PDP 
14 Herbert Street 
Dublin 2 
Ireland 
Website: www.pdp.ie 


Payment 


_} | enclose a cheque for € Please make 
cheque payable to “PDP” 


_} Please send me an invoice 


News updates 


PDP sends compliance news updates to its customers by 
email newsletter, as well as the occasional hard copy mailing 
on courses and events. 

CL) Tick this box if you do not wish to receive this information 


Terms 





Bookings are made subject to our terms, which can be found at 
www.pdp.ie/training/terms 


Compulsory courses — fill in date for each course* 


Data Protection Essential Knowledge - Level 1 
Date: 


Data Protection Essential Knowledge - Level 2 
Date: 


Data Security 
Date: 


Handling Access Requests 
Date: 


Elective courses — fill in one date only* 


Data Protection in the Workplace 
Date: 


International Data Transfers - Overcoming the Limitations 


Date: 


* if you are exempt from attending Data Protection Essential 
Knowledge - Level 1 and/or if you have previously attended 
any of the courses, please tick the relevant boxes below: 


Exemption (if applicable) 


CL) 1am exempt from attending Data Protection Essential 
Knowledge — Level 1 (please supply us with details) 


Courses already taken (if applicable) 

(_} Data Protection Essential Knowledge - Level 1 
(_} Data Protection Essential Knowledge - Level 2 
(_) Data Security 

CL) Handling Subject Access Requests 

_} Data Protection in the Workplace 


CL) International Data Transfers - Overcoming the Limitations 
Preferred exam date 


L) Friday, 21st June 2013 
) Friday, 6th December 2013 
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PDP Journals 


PDP is the publisher of leading expert journals in the fields of data protection and compliance. Each journal 
contains topical articles and news items, as well as practical advice for those implementing compliance 
measures and those who advise them. 


Subscribers include in-house Compliance Officers from the world’s leading financial companies, Data Protection 
Officers from a broad range of Irish and international organisations, as well as major city councils, charities, law 
firms and others. 


PDP publishes the following journals: 


Data Protection Ireland 


Data Protection Ireland is |reland’s leading journal on practical data protection 
compliance issues. The journal is an invaluable source of news, practical AIT ournats 
articles and expert guidance for professionals in the fields of data protection 
and information security. Each edition contains several invaluable articles 
on aspects of data protection compliance. The Editorial Board comprises 
lreland’s leading experts in field of data protection and data privacy. 


Data Protection Ireland 





deadlines Safe Habor not safe enough, 


Subscribers to Data Protection Ireland journal include all types of ees ays Working Party nn 
3 Hartor oaricedion may | gout dastoally afoot emonsratng that 


commercial organisations, charities, government entities, non-departmental er imecrmeneproide, | Moaceton otdoud | 
governmental bodies, commercial law firms, professional services firms, police ee 
authorities, universities and local government bodies. eaeireing 


EU that has allowod 










ry 
organi 
accordi latest 
Opinion of the Article 
29 Working Party 


Data Protection Ireland is published in six editions per year, since 2008. 


Compliance & Risk 


Compliance means conforming to a rule, such as a specification, policy, standard 
AP sournats or law. In the context of organisations, compliance describes the goal that 
foe corporations or public bodies aspire to in their efforts to ensure that personnel 
Com pliance & Risk are aware of, and take steps to comply with, relevant laws and regulations. 





Pi 


Risk refers to the effect of uncertainty on objectives, whether positive or 


We US anti-corruption measure; negative. Risk management is the identification, assessment and prioritisation 
ABI sets uP target foreign companies : : ; inati 
eT cnyerouscomey  usseoomioteusane dong une of risks followed by coordinated and economical application of resources to 
‘ appears in the list of top the same again to Germa- on a Fs < ae 7 
Weckined _wSiniriatoun | Gromaneniso” | teahetha” minimise, monitor, and control the probability and/or impact of unfortunate 









for client 
ach, p.18 


cor events or to maximise the realisation of opportunities. 


cot 
executive officers 


The settlements made by | The US anti-corruption 
z ing.com- | law, which was brought 
pany Siemens, Daimler into foroe over 40 ye> 


wecinetonn | Sven Compliance & Risk serves the needs of Compliance Officers, Risk Managers and 
Legal Advisers by providing timely and relevant practical advice and guidance. The 
Editorial Board comprises the leading experts and practitioners in the fields of compliance and risk management. 


Compliance & Risk is published in six editions per year, since 2012. 


For more informtaion on PDP Journals, and to take out a subscription, visit www.pdp.ie/journals 
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